Selective and efficient quantum process tomography 
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In this paper we describe in detail and generalize a method for quantum process tomography that 
was presented in [l(. The method enables the efficient estimation of any element of the x _m atrix 
of a quantum process. Such elements are estimated as averages over experimental outcomes with 
a precision that is fixed by the number of repetitions of the experiment. Resources required to 
implement it scale polynomically with the number of qubits of the system. The estimation of all 
diagonal elements of the x _ma trix can be efficiently done without any ancillary qubits. In turn, 
the estimation of all the off-diagonal elements requires an extra clean qubit. The key ideas of the 
method, that is based on efficient estimation by random sampling over a set of states forming a 
2-design, are described in detail. Efficient methods for preparing and detecting such states are 
explicitly shown. 

PACS numbers: QD: 03.65.Wj,03.67.-a,03.67.Pp 



I. INTRODUCTION 

For quantum information processing to become fea- 
sible, it is necessary to be able to efficiently character- 
ize quantum processing elements. This characterization, 
taking the name of quantum process tomography (QPT) 
is required, for instance, to design appropiate quantum 
error correcting codes. In general, QPT is a challeng- 
ing task due to the exponential amount of parameters 
involved as a function of the number of qubits (n). An- 
other source of complexity lies in the fact that tomo- 
graphic methods are tipically indirect as the parameters 
characterizing a quantum proecess are not directly acces- 
sible to experiments but have to be inferred after a large 
number of such experiments. To be more precise, it is 
convenient to represent an arbitrary quantum process in 
an abstract way, independently of the physical carriers 
of information and the actual physical time required for 
the process to occur. This can be done by describing the 
process as a completely positive, linear super-operator 
mapping initial states into final states: £{pi n ) — p Q ut- 
This map represents the evolution of quantum states be- 
tween two snapshots in time. Trace preserving maps hav- 
ing the same output dimension as input dimension are 
of particular interest and will be the focus of our work. 
One possible representation of a process is through its 
X-matrix, which is defined with respect to a certain basis 
of the space of operators. Choosing the basis {E m } con- 
sisting of D 2 operators (D = 2™ is the dimensionality of 
the Hilbert space of a system of n qubits), the x~ matrix 
representation for £ is such that 
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Any completely positive linear map can be written in this 
way. If the map preserves the trace its ^-matrix is such 
that the condition J2 mm < Xmm'E m iE m = I holds. The 



map £ is completely characterized by the positive hermi- 
tian matrix Xmm' (satisfying the above trace preserving 
condition). Thus, it is clear that a complete character- 
ization of a map £ requires determining D 4 — D 2 real 
parameters, a number that scales exponentially with the 
number of subsystems (n) . One of the main advantages 
of the method we describe here is that it enables us to 
extract important tomographic information by investing 
resources that scale polynomically with n. 

The main idea of the method, presented first in [lj, is 
to measure any desired ^-matrix element with resources 
scaling polynomially with n. We will show that to es- 
timate diagonal elements of the ^-matrix, the prepara- 
tion and detection of states from a state 2-design will be 
the main ingredient, and it will be explicitly shown. For 
off-diagonal coefficients, besides preparing and detecting 
states that go through the channel in consideration, an 
ancilliary qubit will be needed. The method is "selec- 
tive" since one can use it to estimate any coefficient (or 
any set of coefficients). For each coefficient there is an 
efficient estimation strategy that we describe below. For 
this reason we denote our strategy as selective efficient 
quantum process tomography (SEQPT). 

Our method is inspired on previous proposals that use 
randomized subroutines as intermediate steps for effi- 
ciently estimating any average gate fidelity. So, it is con- 
venient to briefly describe here the features of other exist- 
ing tomographic schemes. The first tomographic method 
proposed [2| is known as Standard quantum process to- 
mography (SQPT). It involves preparing a set of input 
states pk, and then performing full quantum state to- 
mography on the resulting output states obtained after 
evolution. By doing this, we directly measure coefficients 
^jk = Tr(pf-£ (pj)) ■ However, if one wants to find the 
matrix elements Xmm' it is necessary to invert an expo- 
nentially large system of equations relating A with \ [3( . 
For this reason, the method is indirect (since it requires 
inversion to obtain matrix elements Xmn)- It is also in- 
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efficient since, in the most generai case, in order to esti- 
mate any of the coefficients Xmn one needs to perform an 
exponentially large number of experiments and classical 
postprocessing. Another method known as Direct Char- 
acterization of Quantum Dynamics (DCQD) was recently 
proposed [!, [f| and it requires an extra ancillary system 
of n clean qubits. The ancillary qubits must go through 
a clean quantum channel. Provided such a resource is 
available, the method enables the direct estimation of all 
diagonal Xmm by associating them with survival proba- 
bilities of entangled (Bell) states of the system and the 
ancilla. The estimation of off-diagonal elements Xmm 1 is 
also possible in this context but it turns out that it re- 
quires the inversion of a system of equations which, in 
the most general case involves an exponential number of 
terms. More recently, the method of Symmetrized Char- 
acterization of Noisy Quantum Processes @ (SCNQP) 
was introduced. It is based on the idea of transforming 
the original channel £ into a symmetrized channel £' via 
twirling operations. After symmetrization, only diago- 
nal x'mm coefficients remain, being the averages over the 
original coefficients of the same Hamming weight. The 
twirling is achieved using only (O(n)) single qubit gates 
with constant depth. The values of the averaged coeffi- 
cients are linearly related to output probabilities through 
an upper diagonal square matrix of size n + 1. The 
method is ideally tailored for evaluating the applicability 
of relevant quantum error correcting codes Q as it allows 
the evaluation of diagonal Xmm coefficients averaged over 
operators of the same Hamming weight (i.e. xooj average 
over 1 qubit errors, etc). However, it is not possible to 
estimate any of the off-diagonal Xmm' coefficients, which 
are wiped out by the symmetrization protocol, nor distin- 
guish among specific Pauli errors of the same Hamming 
weight. 

Thus, existing methods do not allow the efficient es- 
timation of an arbitrary coefficient Xmm> ■ This will be, 
in fact, one of the main characteristics of the method 
we will discuss below. Our method has a similar flavor 
to SCNQP adding the possibility to determine any of 
the coefficients Xmm' (including off-diagonal ones) with 
polynomial resources. The method is based on two ob- 
servations: The first, is the fact that any matrix element 
Xmm' can be related to an average survival probability of 
input states under the action of the channel (or a related 
quantity as described below). The average involved here 
is over the entire Hilbert space using the so-called Haar 
measure. The second observation is that such averages 
can be efficiently estimated by sampling over a finite set 
of states (a 2-design, as described below). 

This paper is organized as follows. In section [TTJ we re- 
view the method we will use to compute averages over the 
entire Hilbert space: we define and discuss the concept 
of 2-designs. In section Hill we present the core of the SE- 
QPT method: We show how any clement of the %-matrix 
can be efficiently estimated. We separately describe the 
estimation of diagonal and non-diagonal matrix elements 
presenting a detailed budget for the resources required 



for the estimation. Section HVl shows how this very same 
algorithm can be extended. Thus, we present a method 
where all the information required for the simultaneous 
estimation of all diagonal coefficients of the %-matrix is 
obtained from the same experiment. Also, we give a com- 
plete error analysis for the method. In Appendix [X] we 
give a brief review on mutually unbiased bases (MUBs) 
and show that they are a proper 2-design, and in Ap- 
pendix [5] we show how to actually prepare any state on 
a complete set of MUBs (i.e. on a 2-design) by giving an 
explicit construction of change of basis circuits among 
the different bases of the MUBs. 



II. COMPUTING AVERAGES IN HILBERT 
SPACE USING 2-DESIGNS 

A crucial part of the method we will describe below 
consists in estimating averages over the entire Hilbert 
space of products of expectation values of two operators. 
The computation of quantities of this type was analized 
before and, as shown in Q, for any par of operators Oi 
and Oi we have: 

///in \i\li\n i/w/ trtGWO^+trCOiOa) 

J (VI Oi \i>) (ip\ o 2 iv) dif; = d(d + i) ■ 

The integral above is over the entire Hilbert space using 
the so-called Haar measure (which is the only unitarily 
invariant one). 

Experimentally measuring the above quantities, which 
involve averages over the entire Hilbert space seems com- 
pletely unrealistic. However, the beautiful recent work on 
the theory of 2-designs IfiL floL fllL provides the means 
for doing so. Delsarte [13[ showed how integrating poly- 
nomials on the sphere could be reduced to averaging the 
integrand on a finite set of points coined spherical de- 
signs (the important fact is that one can use the same 
set of points to evaluate the average of any polynomial 
-of a fixed degree-). The same idea can be extended to 
integrals over the entire Hilbert space. A state 2-design 
A is a set of states satisfying 

f (VI 1 |V) (VI 2 |V) # = tL £ M °i M M °2 IV) , 

(2.2) 

for all operators 0\^- Thus, averaging over the entire 
Hilbert space is equivalent to averaging over the finite 
set X (whose cardinal is |A|). State 2-designs with a 
finite (but exponentially large) number of states exist. 
It is worth noticing that the computation of the exact 
average using a 2-design becomes a feasible task which 
is still exponentially hard since the number of elements 
of X is typically exponential in the number of qubits. 
However, it is now possible to realize that an estimate for 
the average can be efficiently found. Thus, this average 
can be estimated by randomly sampling over initial states 
|V) chosen from the set X. This idea will be crucial for 
the method we will present below. 
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Luckily, it is rather easy to produce a state 2-design 
for n qubits. One possibility is to find D + 1 mutually 
unbiased bases (MUB) that automatically form a state 
2-design [12| . Each basis will be labeled with an index 
J = 0, . . . , D and the states within each basis will be 
labeled with the index m = 1, . . . , D. In order for the or- 
thonormal bases to be unbiased, the D(D + 1) states of 

the MUBs must satisfy \(^i\^)\ 2 = ^ for all J ^ K. 
Since generalized Pauli operators may be partitioned into 
D + 1 maximally sets of D commuting operators so that 
each pair of sets only hold the identity I as common ele- 
ment there are D + 1 MUB, each one diagonalizing 
each of these commuting subsets of Pauli operators [l5[ . 
In this way, the set of states in the MUBs can be ef- 
ficiently described and also can be efficiently generated 
with 0(n 2 ) one and two qubit gates [HI]. It is simple 
to adapt the procedure used to efficiently generate any 
state in any MUB to compute survival probabilities of 
such states and also to compute the transition rates from 
the (J, m) to ( J, m') states. 

It is interesting to mention that there are other sets 
of states that form a 2-designs but are not MUBs. For 
example, Dankert et. al. [1, [l(| propose to use of ap- 
proximate unitary 2-designs (which are designs on the 
space of unitary operators) showing that they can be effi- 
ciently approximated. An approximate unitary 2-design 
with accuracy e + 1/D 2 can be obtained by employing 
only 0(n log -) gates. Unitary 2-designs acting on any 
fixed state induce state 2-designs fitting into the previous 
scheme. Dually the action of the random unitaries may 
be interpreted as symmetrizing the channel £ through 
twirling. Following this line, we may also use weaker 
symmetrization protocols as in SCNQP Q for estimat- 
ing fidelities of modified channels (jl!2p . 

The importance of 2-designs for the task of quantum 
process parameter estimation was first pointed out by 
Dankert et al. [l(| ■ This first work proved that 2-designs 
provide the means for efficiently measuring the fidelity of 
a quantum process F(£) defined as 



F(£) 



dUtr{U |0) (0| U*E(U |0) (0| 17*)) (2.3) 



U(D) 



where the integral is over the Haar measure. Since the 
integrand is a polynomial of degree 2 in U and degree 2 
in U* unitary 2-designs allow evaluating the expression 
exactly as an average over a finite set of operators U. If 
we think of the operator U in the integrand as acting 
over |0), then the integral over U may be cast in terms 
of an integral over \ip). 



F{£) 



d^{^\£{\^) (^|)|V> 



(2.4) 



This equation makes clear that the state |0) does not 
play a special role in defining the fidelity of the process 
£. At the same time, since the integrand is a polynomial 
of degree 2 in and degree 2 in (ip\, it opens the pos- 
sibility of using quantum state 2-designs for evaluating 
the average fidelity for £. 



III. SELECTIVELY MEASURING CHANNEL 
COEFFICIENTS 

In this section we will present the main idea that en- 
ables Selective Efficient Quantum Process Tomography 
(SEQPT). Below, we will separately discuss the evalua- 
tion of diagonal and non-diagonal elements of the x ma- 
trix. However, the evaluation of both type of coefficients 
is based on the use of a mathematical identity that re- 
lates such coefficients with an average fidelity of a modi- 
fied channel. Thus, using equation (|2.1[) above, together 
with the x matrix representation of the channel £, it is 
simple to show the validity of the following equation: 



F ab {£) 



E a £{\^) (iP\)E b \,p)d?P 



DXab 



D + 1 

This equation is valid provided we use an operator ba- 
sis {E m } which is orthogonal (tr(E m E^) = DS mn ) and 
such that tr(E m ) = DS m Q. An example of such kind of 
basis is the one formed by the generalized Pauli opera- 
tors (obtained by n-fold tensor products of the identity 
and/or the three Pauli operators on each qubit). The 
above equation is easy to prove and is the key of our 
method. 



A. Evaluating diagonal coefficients 

In particular, the above equation shows that diago- 
nal coefficients Xmm are directly related to averaged fi- 
delities of the modified channel £ m defined as £ m (p) = 
EJ n £ (p) E m . Thus, it is straightforward to show that 



F<mm i,£rn) 



1 



D + 1 



(3.2) 



The channel £ m is simply obtained as the application 
of the original channel £ followed by the operator E^ 
(which we assume to be unitary in what follows). Hence, 
if a method for measuring fidelity is available, diagonal 
elements of the ^-matrix are also accessible. One such 
method is shown in figure [TJ According to our previous 



FIG. 1: Circuit for measuring Xmm for a given channel £. 

discussion, the fidelity averaged over the entire Hilbert 
space can be evaluated also by averaging over a state 2- 
design. Thus, the diagonal coefficients are evaluated as 
the average fidelity over all the states of the 2-design. Be- 
low, we will show that estimating the average fidelity with 
fixed precision requires a number of measurements that 
scales polynomially with the number of qubits. To do 
this, one should simply be able to randomly sample over 
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the states of the 2-design. In such case the standard de- 
viation in the estimation decreases as 1/yM where M is 
the number of experimental runs. Also, in the Appendix 
lAl we explicitly show an efficient method to prepare the 
set of states of a 2-design. This completes the method to 
evaluate diagonal coefficients. 



B. Evaluating off-diagonal coefficients 

The evaluation of off-diagonal elements requires a 
slightly different strategy. This is the case because, un- 
like diagonal coefficients, Xmm' is not related with the 
average fidelity of a physically realizable (completely pos- 
itive) channel. In fact, for m ^ m! the above expression 
reduces to 



\E„ 



• dip = 



D + l 



(3.3) 



As p — > £ [E^pEm'} is in general not a physical map (it 
is not completely positive nor trace preserving) the mea- 
surement of off-diagonal coefficients is not as straightfor- 
ward. However, as we will now show, it can be achieved 
by using a single qubit as an ancilla. 

The measurement scheme is very similar to the one 
used in the DQC1 model of quantum computation [l7j 
and is described by the circuit exhibited in Figure [H As 
before, the state used as input should be randomly 
chosen from a 2-design. Let us now analyze the circuit [2] 



1 0) Ancilla 
IV) M ai n 



H 



~1 
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FIG. 2: Circuit for measuring Re(xmn) for a given channel £ 

to show that it indeed measures Xmm' ■ 

The input state is po = |0) (0| (g> |V) (VI- After going 
through the circuit, but prior to measurement, the state 
is given by 



Pf 



| (|0> (0|®i4'M (V| E„ 

|0) (L!®^, |V) (VI E m + 

|l)(0|®i4|V> ty\E m > + 
|1) (1| ® Et |V) WE m ). 



(3.4) 



It can be easily shown that the expectations value of a x 
or (Ty on the ancilla qubit conditioned to the survival of 
the state |V) on the main system is related to the off- 
diagonal Xmm' coefficients as 



tr(p/ (a x ® |V) (Vl))# = 
tr(p/(o- w ® |V)<V|))# = 



DRe (Xmm> ) + (5 r> 



D + l 

Dim (Xmm>) 



%5) 



(3.6) 



D + l 

This shows how to measure off-diagonal x coefficients. 



IV. ERROR ANALYSIS AND 
GENERALIZATIONS 

A. Error analysis for selective and efficient 
quantum process tomography 

The method discussed above requires the use of states 
forming a 2-design as inputs and the detection of such 
states to estimate the survival probabilities. The use of 
2-designs is crucial to evaluate the required average. In 
particular, it is useful to use a special type of 2-design 
formed by the D(D + 1) states belonging to D + 1 mutu- 
ally unbiased bases of the Hilbert space. We will denote 
projector onto the fc-th state of the J'th base as ? (see 
Appendix [A"]) . Using such notation, the circuit for mea- 
suring the circuit in figure[3]describes the protocol for the 
estimation of the Xm.m, which is obtained by randomly 
sampling over J and k. An effective way of estimating 
this average, known as Monte Carlo sampling, is to ran- 
domly choose both J and k for each experiment and take 
an average over a set of M such experiments. The values 
obtained in this way are unbiassed estimators of Xm m - 
Furthermore, since the results of each individual experi- 
ment are either or 1, we can bound the variance of the 
average over M experiments by . If we want to ensure 
with a probability p that the error is lower than e, then 
a Chernoff bound implies that a number of experiments 
satisfying M > ln[2(l - p)^ 1 ]/(2e 2 ) is needed. Each of 
these M experiments will have a complexity of 0{n 2 ) 
arising from the number of elementary quantum gates 
required for the change of basis circuit (See Apcndix [Bj) . 
The estimation of off-diagonal elements of the x _ matrix 
requires four times more experiments because of the mea- 
surement on the ancilliary qubit. 
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FIG. 3: 2-design circuit for measuring Xmm for a given chan- 
nel £ 



B. Generalization I: Simultaneous estimation of 
diagonal coefficient using transition probabilities 

It is useful to notice that the method can be easily ex- 
tended if one is able to prepare the states corresponding 
to the MUBs associated with the operator basis E m used 
to describe the channel. Let us focus on the case where 
the operators E m are generalized Pauli operators. Sup- 
pose that the projectors are the states stabilized by 
commuting subgroups of Pauli operators (see Appendix 
|A|) . Then, we can simply find out how the operator E mo 
acts on the state Hjj: upon conjugation. Hence, the ex- 
pectation value of the observable: 



tr(El Q £(U jX )E mo U g ) 
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corresponding to instances of the experiment is equal to: 

f-(£(i%)n j!fc -,) (4.i) 

for some k' which depends on k, J and E mo . Then, it 
is clear that by detecting not only the survival of the 
state but also recording all the possible transitions we 
can obtain all the required information to estimate any 
diagonal coefficient and not a single one. Thus, the strat- 
egy is simple: one maintains the random preparation step 
of a state labeled by the indices (J, k) and one stores the 
information about the recorded state labeled with (J, k'). 
Given the operator E m , the event should be counted in 
the estimation of Xmm only if the input state (J, k) is 
mapped onto the output state (J, k') by the action of 
E m . Suppose that we perform a set of repetitions of this 
experiment and denote each event by a triple (J,k,k'), 
where J indicates the basis randomly chosen for the ex- 
periment, k the randomly chosen input state and k', the 
measured output state. Then, the experiment should be 
counted positively in the fidelity of E m if and only if k'— k 
is precisely the commutation vector of the operator E m 
with respect to basis Bj. The commutation vector of an 
operator E respect to basis Bj is the binary vector v such 
that 



J t E= (-l) Vi EJi 



(4.2) 



where Ji, J 2 , . . . , J n are the canonical generators for the 
stabilizer group of Bj. We may restate this as saying 
that Vi is the simplectic inner product between the vector 
describing E and the one describing Ji. 

Since the commutation vector is so important for the 
estimation of the Xmm coefficients, we will show how it 
can be efficiently calculated from the canonical descrip- 
tions of E m and Bj. For E m , we assume a canonical 
description through a binary vector with two parts, nix 
and m z such that E m = X m " x Z™ z . For Bj, there are 
two possibilities. Either Bj is the computational basis 
Bz or Bj is a basis stabilized by the group described by 
the binary vector J as in equation (|A3|) from Appendix 
[S] In cither CcLS6, cL canonical representation of the n 
generators of the stabilizer may be obtained with only 
0{n 2 ) operations. The calculation of the commutation 
vector then additionally requires the calculation of n sim- 
plectic inner products thus maintaining the algorithmic 
complexity. 

Thus, the estimation of a specific Xmm from such a 
set of M experiments requires O(Mn) storage for the de- 
scription of the M individual experiments. The amount 
of classical processing required is 0(Mn 2 ), mainly for the 
verification of M commutation vectors. Since each of the 
M experiment already requires 0(n 2 ) elementary quan- 
tum gates and 0(n 3 ) classical processing to determine 
these quantum gates, this will be the dominant complex- 
ity term for the estimation of Xmm- 



C. Generalization II: Detecting and measuring 
large Xmm coefficients 

We have shown that a single set of experiments is ca- 
pable of providing information to estimate any of the 
diagonal Xmm coefficients. We will now extend this re- 
sult to determine the operators E m related to the largest 
Xmm coefficients. A straightforward search by estimating 
all Xmm coefficient is not a reasonable approach to doing 
this, as the number of such coefficients is exponential in 
ri. Surprisingly, we will see that finding and estimating 
the set of such Xmm is actually possible under the condi- 
tion that there be only a few Xmm with high values. This 
is precisely the case that can be effectively remedied by 
quantum error correction, where the set of correctable 
error syndromes is typically small. 



Suppose that we estimate all F (£ m ) 



_ D X r, 



5+1 



— coeffi- 



cients from a set of M experiments. The smallest nonzero 
value we could obtain in such an estimation is jj, while 
the second smallest value is -A and so on. The efficiency 
of our criteria for finding the E m with large Xmm coeffi- 
cients is based on the fact that we can efficiently detect 
all F (8 m ) for which the estimated value is greater or 
equal to A. Furthermore, we will be able to quantify 
how unlikely it is for a F (£ m ) larger than e, to have an 
estimated value smaller than 

Suppose we wish to determine the operator E m con- 
sistent with two experiments (J, fci,^), (J', fcQ. If 
J = J' there will be either or D such operators E m . 
Otherwise, there is exactly one such operator which we 
will show how to determine. We will start by noting that 
any operator E m can, up to a phase, be written as: 



E m = 



II A' II / 



(4.3) 



Where the Ji and J,', with i € {1 . . . n}, are the canonical 
generators of the stabilizer J and J' respectively. Once 
the vectors q and q' are obtained, it is straightforward to 
obtain the canonical representation for E m with 0(n 2 ) 
classical operations. Note that representation (|4.3p of E m 
is just a generalization of the canonical representation, 
where Bj = Bx — Bo and Bj> = Bz- 

We must obtain q and q' such the E m given by repre- 
sentation 14.31 satisfies: 



JiE n 

J %En 



(-1) 
(-1) 



l) k 2- k 'i E m J' . 



(4.4) 



To do this, we determine the non-singular binary matrix 
C such that: 



Condition 



may now be translated as: 

k 2 -ki = Cq' 
k^-ki = C T q 



(4.5) 



(4.6) 
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Thus, by inverting C and C T , we may obtain the neces- 
sary values for q and q'. This procedure may be repeated 
on each of the (^) pairs of experiment data to find the 
E m for which the estimate for F(£ m ) > 2/M. 



our knowledge, this is the first application profiting from 
both the 2-design averaging property and stabilizer prop- 
erties of this set of states. 



D. Error analysis for simulaneous determination of 
coefficients 



One may consider now how many experiments are 
needed to obtain the Xmm coefficients with a certain pre- 
cision. If one wishes to measure all Xmm coefficients 
greater than e, all within individual uncertainty 5, one 
may give the number of experiments M sufficient for 
achieving this with a probability P as: 



M > 



2{D + \) (£> + !) _ 2(1 + ^)(1 



D I 



D 2 S 2 (1-P) 



<5 2 (1-P) 



(4.7) 



If one further considers e 3> this expression may be 
simplified to: 



M > 



5 2 {l-P) 



(4.8) 



This means that we may perform full diagonal tomog- 
raphy with only polynomial resources in both the num- 
ber of qubits in the system and the desired precision 5. 
A loophole in this argument is that for a random chan- 
nel the coefficients Xmm will actually be expected to take 
typical values close to jy. The proposed method will 
yield good results when the channel under consideration 
is not random, particularly for characterizing highly local 
noise. 



V. SUMMARY 

In this article we have shown how to selectively and 
efficiently measure any coefficient of the ^-matrix rep- 
resentation of a channel. To estimate such coefficients 
we could adapt any method capable of efficiently esti- 
mate the average fidelity of a channel. In particular, we 
described in detail how to do this by estimating the fi- 
delity of states randomly sampled over the states of a set 
of mutually unbiased basis, which have the property of 
forming a state 2-design. We presented an explicit con- 
struction of the change of basis circuits for such a MUB 
set composed by bases stabilized by tensor product Pauli 
operators. The fact that these MUBs form a 2-designs 
allows us to sample over a finite set of states to obtain 
the mean values required for the coefficient estimation. 
We are also able to profit from the rich stabilizer prop- 
erties of this construction to allow the estimation of any 
diagonal % mm from the same set of experimental mea- 
surements. This construction, allowing the efficient and 
selective estimation of coefficients is not the only strength 
of this method. It also enables us to efficiently determine 
every diagonal coefficient larger than a certain value. To 



APPENDIX A: MUTUALLY UNBIASED BASES 



Mutually unbiased bases (MUB) are a construct from 
combinatorial mathematics that has become part of the 
theory toolbox for quantum information. We say that 
two orthonormal bases Bj — {\ip'm) '■ m S 1..D} and 
Bk = {IV'/'O '■ I G 1..D} are mutually unbiased iff 



|(^f>|=^ 



1 

D 



Vm, I 



(Al) 



The usual reading of this equation states that measure- 
ment in basis Bj gives absolutely no information about 
measurement in basis Bk and vice versa. It has been 
shown that there can be at most D + 1 bases which are 
mutually unbiased and constructions are only known for 
prime power dimensions. Klappenecker and Roetteler 
[12] ] related maximal sets of MUB to 2-designs. They 
proved that the set of states belonging to D + 1 mu- 
tually unbiassed bases is itself a state 2-design. Earlier, 
Bandyopadhyay et al.fl4| had proven a strong connection 
between sets of mutually unbiased bases and maximally 
commuting sets of orthogonal unitary operators. One 
of their results is that if one partitions a complete set 
of D 2 — 1 mutually orthogonal traceless operators into 
D + 1 subsets of D — 1 commuting operators each, then 
the D + 1 bases diagonalizing each of these subsets are 
mutually unbiased. We will provide an explicit construc- 
tion of such sets as it will later be necessary to refer to 
it and invoke some of its properties. 

When dealing with tensor product Pauli operators, the 
construction going from operators to states and back may 
be cast in terms of the stabilizer formalism [l8|, [ill l2dj | . 
In this formalism we will say that a state is stabilized 
by an operator O if it holds that 0\ip) = ± \ip). States 
are described by the set of operators stabilizing them and 
the corresponding eigenvalues. If the 2 2n — 1 generalized 
Pauli operators are partitioned into 2™ + 1 maximally 
conmuting subsets of 2™ — 1 Pauli operators, each of these 
subsets will be the stabilizer of a basis, and each of these 
bases will be unbiased to each other. Thus, the problem 
of finding the stabilizer groups for the MUB set is reduced 
to that of partitioning the generalized Pauli operators 
into 2™ + 1 Abelian groups. 

The easiest way to construct this partition is via the 
finite field construction first introduced by Wootters [2lT ] 
and used by Paz et al. |22j ■ The first requirement is the 
construction of the companion matrix M for a primitive 
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polynomial of the finite field GF(2 n ): 



/ 1 
1 



M 





ra n r 2 



(A2) 



r n -i / 



where the primitive polynomial for the finite field is 
p (x) = tq + r\x + 7-2.'E 2 + ... + r n -\x n + x n . 

This matrix has the property that M = M and 
M =^ M Vfc < D, where every operation on the ma- 
trix is performed modulo 2. Consider the following sets 
of generalized Pauli operators, 



X 



1M 3 rybM' 



3 



1. 



D-l 



}, (A3) 



where b £ {0,1}™ is an n bit vector, M is the transpose 
of M, 1 = (1,0,0, ...) is the first canonical binary basis 
vector and = (g) i X b * . Note that since M D = M, we 
have that j = is equivalent to j = D — 1. 

It is easy to check that Gg is an Abelian group and 
that the only common operator between groups Gg and 
Gp is the identity. Thus, the sets Gg, along with the 
group formed by the tensor product of Z operators -that 
is, the stabilizer group for the computational basis- is the 
partition needed. 

This completes the explicit construction of the MUB 
set, and of the required 2-design. On Appendix [51 we will 
see an operational approach on how to prepare the states 
from this MUB set, and how to measure on each of these 
bases. 



APPENDIX B: CHANGE OF BASIS CIRCUIT 

The circuits presented in section HTT1 assume that states 
are sampled over the whole Hilbert space. However, it is 
sufficient to sample over a complete set of MUBs, since 
these form a state 2-design. In this appendix we will 
show how to build efficient change of basis circuits for 
a given set of MUBs that, along with translations in the 
computational basis, will allow to sample over every state 
from the 2-design. The change of basis circuits should 
implement the unitary rotation Vj such that 



(Bl) 



These circuits are a main component of the tomo- 
graphic scheme introduced in this work, since they are 
used for the preparation of arbitrary MUB states and to 
measure in non-computational MUB basis. Hence, the 
efficiency achieved in this step will be reflected in that of 
the whole method. 

The construction is divided into two stages: 

1. The construction, for a J basis, of the circuits T\ 
such that \4>{) = \4>a)- This construction is 
trivial if the chosen J corresponds to the computa- 
tional basis. 



2. The construction of the Vf for the same fixed J, 
since every other change of basis can be built by 



combining two of these circuits via Vjf = Vj^Vj^ 

v J W J 

With an efficient solution to the second stage, it will 
be possible to efficiently go from any state of any of the 
basis from the MUB set to any other state of any other 
basis from the set. Thus solving the problem of averaging 
over a 2-design. 



1. Circuits for the change of basis 

In this section we will present an efficient construction 
for circuits that convert any state from the computational 
basis into the corresponding state of the basis stabilized 
by G 5 . 

The problem of finding a change of basis quantum cir- 
cuit to go from the computational basis to any other is 
equivalent to that of finding a circuit that, under conjuga- 
tion, transforms any tensor product of local Z operators 
-that is, the stabilizers of the computational basis- into 
the corresponding stabilizers of the target basis (i.e.: the 
operators belonging to Gg). In fact, we are looking for a 
unitary operator Vg such that: 



PsMV 



where P^ k £ Gg and \i) 



. Vi, Vfc 



(B2) 



is the state i from the com- 



putational basis. So UJ-Pg fc Vg has to be, for every fc, a 
stabilizer operator for the computational basis. 

The first step for the construction is to find a set of 
generators for the stabilizer group of the target basis. 
This can be done easily with the definition (|A3|) using 
j = 0, ...,n — 1, and it is efficient since it only requires 
0(n 2 ) classical operations. This is thanks to the fact 
that M is sparse allowing multiplication of vectors by M 
to be performed with only 0(n) operations. Then, in 
the following steps, each of the operators is going to be 
conjugated into stabilizers of the computational basis. 

The second step is to chose the first operator from the 
generator group. That is, given the generator group in 
the form of equation (|A3j) . take the operator Pg , where 

b labels the generator group under consideration. 

As the third step for the construction, single qubit ro- 
tations should be performed on each qubit to transform 
the operator into a product of single qubit Z and 1, as 
follows: 

For each qubit: 

• If the operator has a 1 on the qubit in question, 
nothing should be done. 

• If the operator has a Z, nothing should be done. 

• If the operator has an X, Hadamard conjugation 
should be performed. 
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• If the operator has a Y, phase (for a single qubit 
in the computational basis it acts as T \b) = i b \b)) 
and Hadamard conjugation should be performed. 

This step is summarized as follows: the operator cho- 
sen should be conjugated by 



where 



S = (g)RUlMl).,(bMJ 



i?(0,0) 
i?(0,l) 
i?(l,0) 

i?(l,l) 



(B3) 



1 

H 
1 



(B4) 



and the subindex indicates the qubit in which each oper- 
ator is acting. 

So this transformed the first operator of the stabilizer 
into a product of Z and 1 for each single qubit using 
0(n) quantum gates. The fourth step is to transform 
this product into a Z on the first qubit and identities 
on every other qubit. This is easily done via successive 
control-not conjugations, each one with control on each 
of the qubits with except for the first one, and target 
on the first qubit. 

So far we have conjugated the chosen operator via U\ 
defined as: 



Ui = \l[(C- Not (i, 1)) 



,i=2 




1_5 (u;i) ji o 5 (tA}J).,o 



1M J )„ IbM' 



(B5) 



transforming the first generator of the stabilizer group 
of the basis chosen into Zi, using 0{n) quantum gates. 
However, all the other operators on the stabilizer group 
are changed due to the conjugation performed by U\. 
The next step is to see how they are changed. This is 
easily done in the circuit formalism, constructing the cir- 
cuit U\PU\ and permuting the C-Not gates and the ro- 
tations with the Pauli operators in P can be done easily, 
and requires 0(n) classical operations for each of the n— 1 
remaining operators in Gg. 

It should be noticed, as it will be used later on, that 
the order of the generators is conserved. That is, the first 
generator of a stabilizer group corresponding to j = 
will be transformed into the first generator of another 
stabilizer group, and so on. 

We have found a way to transform the generators of 
Gg into a the generators of a group Gg that has Z\ as 
one of the stabilizers. So every other operator in Gg can 
have either a Z or a 1 on the first qubit. The remaining 
canonical generators (i.e., those with j — 1, n— 1) will 
transform into operators having the identity on the first 
qubit. This way, the generator set Gg has been trans- 
formed into Z\ and the generators of a stabilizer group 



of n — 1 qubits, in 0(n 2 ) classical operations and 0(n) 
quantum gates. Now we have to repeat the procedure 
from the second step and on for the remaining n — 1 
qubits to obtain the circuit for changing from the basis 
chosen into the computational basis. It's easy to see that 
the whole circuit will require 0(n 3 ) classical operations 
for its construction, and 0(n 2 ) quantum gates. 



2. An enlightening example 

We now illustrate the ideas of the method through an 
example. The zeroth step of the method is the choice 
of a primitive polynomial for the field GF (2™). In this 
example we will consider 3 qubits, i.e. n = 3, and the 
one chosen for this example is P (x) = 1 + x + x 3 . This 
polynomial gives the following companion matrix: 



M 




(B6) 



And each basis of the MUB will be characterized by a 
&, as shown on equation (|A3[) . In this example we will 
consider the basis with b = (1, 0, 1). It is straightforward 
to find the corresponding stabilizer group generators: 



Pti = 1 



P t2 



1 (g) z 
Y®Z 
Z®Z®Y 



(B7) 
(B8) 
(B9) 



Once the generators for the stabilizer group are known 
we can follow the previously described steps. Take the 
first operator. Since it has a Y on the first qubit, conju- 
gate it via T^H . Then apply a C-Not with control in the 
third qubit and target in the first to transform this first 
operator into Z (S> 1 <S> 1 as shown on figure [U 



T 



Y 



H 




FIG. 4: Example of a first step of a change of basis circuit. 

Next we have to see how the other generators of the 
stabilizer group transform under this circuit. It is not 
difficult to see that the transformed stabilizer group G' 



G' = {Z <8 1 <g> 1, 1 <g> Y <g> Z, 1 <g> Z <8 X) (BIO) 

We have to repeat the above procedure for the the last 
two generators. This will not modify the first generator 
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since it only acts on the first qubit. This defines the 
recursive procedure that will, at last, generate the change 
of basis circuit, that will be the right side of the circuits. 
In figure the full result is shown. 



— T f - H 


—a 






J 






H 


— <3 












H — 









FIG. 5: Example of a change of basis circuit. 



The iterative procedure described to generate the cir- 
cuit is applied n times. Each iterative step incorporates 
O (n) quantum gates, which means the full circuit will use 
O (n 2 ) single and two-qubit quantum gates. On the other 
hand, the classical overhead for obtaining a description 
of the circuit to apply requires O (n 3 ) classical process- 
ing, giving rise to the dominant term in the efficiency of 
our method. 
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